feat: schannelauthenticationenabled property

SpecterOps · Sep 2, 2024 · a8c37b7 · a8c37b7
1 parent 3f8f147
commit a8c37b7
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/src/CommonLib/Helpers.cs b/src/CommonLib/Helpers.cs
@@ -295,6 +295,11 @@ public static IRegistryKey OpenRemoteRegistry(string target) {
             CommonOids.SmartcardLogon,
             CommonOids.AnyPurpose
         };
+
+        public static string[] SchannelAuthenticationOIDs = new string[] {
+            CommonOids.ClientAuthentication,
+            CommonOids.AnyPurpose
+        };
     }
 
     public class ParsedGPLink {

diff --git a/src/CommonLib/Processors/LdapPropertyProcessor.cs b/src/CommonLib/Processors/LdapPropertyProcessor.cs
@@ -553,6 +553,11 @@ public static Dictionary<string, object> ReadCertTemplateProperties(IDirectoryOb
                 effectiveekus.Intersect(Helpers.AuthenticationOIDs).Any() | effectiveekus.Length == 0;
             props.Add("authenticationenabled", authenticationEnabled);
 
+            // Construct schannelauthenticationenabled
+            var schannelAuthenticationEnabled =
+                effectiveekus.Intersect(Helpers.SchannelAuthenticationOIDs).Any() | effectiveekus.Length == 0;
+            props.Add("schannelauthenticationenabled", schannelAuthenticationEnabled);
+
             return props;
         }